$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/577/fLLpZum3X6sl-4222lszzyxsQ2g.roa File: fLLpZum3X6sl-4222lszzyxsQ2g.roa (raw, json) Hash identifier: qvOKsBb0562nNXeR+Q48TUG9LdWMghvi+YbMCN7tprE= Subject key identifier: 7C:B2:E9:66:E9:B7:5F:AB:25:FB:8D:B6:DA:5B:33:CF:2C:6C:43:68 Certificate issuer: /CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Certificate serial: 1DE9 Authority key identifier: 75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fLLpZum3X6sl-4222lszzyxsQ2g.roa Signing time: Sat 13 Sep 2025 03:04:41 +0000 ROA not before: Sat 13 Sep 2025 03:04:41 +0000 ROA not after: Mon 03 Aug 2026 08:44:40 +0000 asID: 4812 IP address blocks: 150.242.238.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.mft rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.crl rsync://rpki.cnnic.cn/rpki/A9162E3D0000/BBYptqnqt8sTJOo5ePA3lviJtUA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BBYptqnqt8sTJOo5ePA3lviJtUA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Oct 2025 18:07:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7657 (0x1de9) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75B4714C4F61BEA04A02CF9CF563AE134F479C85 Validity Not Before: Sep 13 03:04:41 2025 GMT Not After : Aug 3 08:44:40 2026 GMT Subject: CN=7CB2E966E9B75FAB25FB8DB6DA5B33CF2C6C4368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f9:03:7e:4c:b7:0f:a1:d3:e5:b6:68:33:a3: 87:f0:10:72:80:21:de:4c:98:e0:6f:c5:40:ba:96: 31:f0:fb:a7:d4:e0:09:c6:3b:58:a1:50:17:63:e5: a3:41:12:59:a4:fd:10:8a:f7:ac:23:29:b2:19:6e: 17:ca:f6:85:87:ba:b3:49:86:28:1d:0c:c2:0b:6e: d9:7e:57:b5:f2:15:a0:65:b7:fc:00:50:ac:1c:4d: ac:43:9e:55:b1:8c:6e:67:44:f4:42:4f:61:b5:c4: ac:cf:07:cb:12:e4:41:13:1f:f9:97:b6:d6:7b:82: 81:34:4c:2e:15:44:af:75:ab:0c:d1:d7:e5:1a:34: 3e:86:32:fb:a9:fc:58:f4:c9:50:b3:36:08:74:66: 3a:bd:6f:ed:08:82:a2:a3:87:77:d7:41:e9:b4:0c: 7e:ac:d2:b6:19:a5:e9:93:b4:36:1b:2d:ce:89:4b: d8:27:14:c4:65:6c:39:d3:a7:5d:72:9d:5b:94:fe: e9:9a:01:77:a1:4c:21:ce:d4:4d:f0:08:98:bc:29: 91:5c:09:56:2f:d6:e2:67:4c:e4:29:7b:a6:fb:69: e8:c3:bb:74:e1:e5:f4:e1:fb:94:52:66:09:72:28: 80:42:6f:93:ca:4f:08:4a:78:36:8a:cb:f2:4e:5d: 45:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:B2:E9:66:E9:B7:5F:AB:25:FB:8D:B6:DA:5B:33:CF:2C:6C:43:68 X509v3 Authority Key Identifier: keyid:75:B4:71:4C:4F:61:BE:A0:4A:02:CF:9C:F5:63:AE:13:4F:47:9C:85 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/dbRxTE9hvqBKAs-c9WOuE09HnIU.crl Authority Information Access: CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/dbRxTE9hvqBKAs-c9WOuE09HnIU.cer X509v3 Key Usage: critical Digital Signature Subject Information Access: Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/577/fLLpZum3X6sl-4222lszzyxsQ2g.roa RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml sbgp-ipAddrBlock: critical IPv4: 150.242.238.0/23 Signature Algorithm: sha256WithRSAEncryption 23:34:10:e9:38:e7:f0:2c:56:6c:9a:a9:04:19:25:4c:97:7f: 8e:21:ce:f5:50:18:4b:85:a1:13:a1:1c:ea:f8:7b:8b:e1:3a: 15:0c:85:71:64:12:fa:f1:3f:63:f0:db:6d:a9:6d:d7:c3:e7: 87:e6:e3:e1:16:ac:9b:29:d8:86:26:71:bd:d3:45:0e:1e:6d: 9c:2c:e0:17:dd:aa:40:29:96:fb:46:6e:4c:d1:1b:68:59:28: d9:dc:19:fd:69:60:8a:0d:06:8b:e8:d8:51:51:65:f3:a2:62: eb:35:24:70:b7:be:bb:7c:ce:54:60:39:19:be:c0:31:ca:ec: 64:2d:e2:7d:c3:b4:65:55:6e:7a:4f:fa:08:28:b9:8e:42:f2: e8:88:b9:50:19:94:cf:43:71:4f:83:81:72:00:b7:c4:0a:d2: cf:d6:18:32:ff:68:1d:41:5e:0a:cc:4d:4b:b9:9b:f7:61:f2: fe:fe:d2:a3:6d:db:ae:5d:33:62:d6:71:41:02:29:7d:f1:65: 8f:5a:cc:73:bc:82:7e:f9:cd:09:74:bc:5f:eb:53:23:1c:60: 64:04:22:a3:86:39:fa:bd:d6:14:b6:f2:9e:e6:fe:9b:11:ad: 09:10:4b:a1:7a:b7:0c:51:15:83:25:42:01:84:7b:8e:8e:03: 11:16:ef:1b -----BEGIN CERTIFICATE----- MIIE1TCCA72gAwIBAgICHekwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNzVC NDcxNEM0RjYxQkVBMDRBMDJDRjlDRjU2M0FFMTM0RjQ3OUM4NTAeFw0yNTA5MTMw MzA0NDFaFw0yNjA4MDMwODQ0NDBaMDMxMTAvBgNVBAMTKDdDQjJFOTY2RTlCNzVG QUIyNUZCOERCNkRBNUIzM0NGMkM2QzQzNjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDH+QN+TLcPodPltmgzo4fwEHKAId5MmOBvxUC6ljHw+6fU4AnG O1ihUBdj5aNBElmk/RCK96wjKbIZbhfK9oWHurNJhigdDMILbtl+V7XyFaBlt/wA UKwcTaxDnlWxjG5nRPRCT2G1xKzPB8sS5EETH/mXttZ7goE0TC4VRK91qwzR1+Ua ND6GMvup/Fj0yVCzNgh0Zjq9b+0IgqKjh3fXQem0DH6s0rYZpemTtDYbLc6JS9gn FMRlbDnTp11ynVuU/umaAXehTCHO1E3wCJi8KZFcCVYv1uJnTOQpe6b7aejDu3Th 5fTh+5RSZglyKIBCb5PKTwhKeDaKy/JOXUXfAgMBAAGjggHxMIIB7TAdBgNVHQ4E FgQUfLLpZum3X6sl+4222lszzyxsQ2gwHwYDVR0jBBgwFoAUdbRxTE9hvqBKAs+c 9WOuE09HnIUwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBcBgNVHR8EVTBTMFGg T6BNhktyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3 L2RiUnhURTlodnFCS0FzLWM5V091RTA5SG5JVS5jcmwwYwYIKwYBBQUHAQEEVzBV MFMGCCsGAQUFBzAChkdyc3luYzovL3Jwa2kuY25uaWMuY24vcnBraS9BOTE2MkUz RDAwMDAvZGJSeFRFOWh2cUJLQXMtYzlXT3VFMDlIbklVLmNlcjAOBgNVHQ8BAf8E BAMCB4AwgZwGCCsGAQUFBwELBIGPMIGMMFcGCCsGAQUFBzALhktyc3luYzovL3Jw a2kuY25uaWMuY24vcnBraS9BOTE2MkUzRDAwMDAvNTc3L2ZMTHBadW0zWDZzbC00 MjIybHN6enl4c1EyZy5yb2EwMQYIKwYBBQUHMA2GJWh0dHBzOi8vcnBraS5jbm5p Yy5jbi9ycmRwL25vdGlmeS54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD BAGW8u4wDQYJKoZIhvcNAQELBQADggEBACM0EOk45/AsVmyaqQQZJUyXf44hzvVQ GEuFoROhHOr4e4vhOhUMhXFkEvrxP2Pw222pbdfD54fm4+EWrJsp2IYmcb3TRQ4e bZws4BfdqkAplvtGbkzRG2hZKNncGf1pYIoNBovo2FFRZfOiYus1JHC3vrt8zlRg ORm+wDHK7GQt4n3DtGVVbnpP+ggouY5C8uiIuVAZlM9DcU+DgXIAt8QK0s/WGDL/ aB1BXgrMTUu5m/dh8v7+0qNt265dM2LWcUECKX3xZY9azHO8gn75zQl0vF/rUyMc YGQEIqOGOfq91hS28p7m/psRrQkQS6F6twxRFYMlQgGEe46OAxEW7xs= -----END CERTIFICATE-----Generated at Mon Oct 20 17:52:04 2025 by rpki-client